bppicker 0.2.0__tar.gz → 0.2.1__tar.gz

{bppicker-0.2.0 → bppicker-0.2.1}/CHANGELOG.md

@@ -6,6 +6,17 @@ this project follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.2.1] — 2026-10-23
+
+### Fixed
+- **The Mac app starts.** The 0.2.0 Mac build did not: macOS refused to
+  let its signed server load the Python runtime it unpacks (library
+  validation under the hardened runtime), so the app never reached its
+  server. The app now carries the entitlements a PyInstaller build
+  needs, and the release pipeline runs the signed server from the
+  installer before anything is uploaded. Install 0.2.1 over 0.2.0.
+  The Python package was not affected.
+
 ## [0.2.0] — 2026-10-23
 
 Licensing, accuracy and hardening release. **Schema version: 44** (unchanged).
@@ -434,7 +445,8 @@ External calls are limited to documented features:
   desktop wrapper currently builds only the macOS bundle.
 - Python 3.11 only (CI tests this version; 3.12+ is unvalidated).
 
-[Unreleased]: https://github.com/Arkalogy/best-photo-picker/compare/v0.2.0...HEAD
+[Unreleased]: https://github.com/Arkalogy/best-photo-picker/compare/v0.2.1...HEAD
+[0.2.1]: https://github.com/Arkalogy/best-photo-picker/releases/tag/v0.2.1
 [0.2.0]: https://github.com/Arkalogy/best-photo-picker/releases/tag/v0.2.0
 [0.1.2]: https://github.com/Arkalogy/best-photo-picker/releases/tag/v0.1.2
 [0.1.1]: https://github.com/Arkalogy/best-photo-picker/releases/tag/v0.1.1

{bppicker-0.2.0 → bppicker-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: bppicker
-Version: 0.2.0
+Version: 0.2.1
 Summary: Local-first photo curation tool — score, deduplicate, and select the best photos from large collections
 Project-URL: Homepage, https://github.com/Arkalogy/best-photo-picker
 Project-URL: Repository, https://github.com/Arkalogy/best-photo-picker

{bppicker-0.2.0 → bppicker-0.2.1}/bpp/__init__.py

@@ -18,7 +18,7 @@ _os.environ.setdefault("OPENCV_IO_MAX_IMAGE_PIXELS", str(200_000_000))
 # the first import.
 _os.environ.setdefault("NO_ALBUMENTATIONS_UPDATE", "1")
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"
 APP_NAME = "Best Photo Picker"
 
 # Eagerly import the model registry so the download chokepoint

{bppicker-0.2.0 → bppicker-0.2.1}/pyproject.toml

@@ -8,7 +8,7 @@ build-backend = "hatchling.build"
 # *import* package stays `bpp` — `pip install bppicker` then
 # `import bpp` is the contract.
 name = "bppicker"
-version = "0.2.0"
+version = "0.2.1"
 description = "Local-first photo curation tool — score, deduplicate, and select the best photos from large collections"
 readme = "README.md"
 requires-python = ">=3.11,<3.12"

{bppicker-0.2.0 → bppicker-0.2.1}/tests/test_desktop_shell_boot.py

@@ -105,3 +105,27 @@ class TestDesktopShellRestartLifecycle:
         monitor = src.split("Server respawned successfully")[0]
         monitor = monitor[monitor.rfind("loop {") :]
         assert "foreign_ticks" in monitor and "show_start_failure(&handle_nav, true)" in monitor
+
+
+def test_the_signed_app_may_load_its_own_python():
+    """The sidecar is a PyInstaller one-file binary; under the hardened
+    runtime it needs library validation disabled or it can't load the
+    Python it unpacks (the 0.2.0 Mac build did not start). The bundler
+    applies the entitlements file to every binary it signs, and the
+    release runs the signed sidecar from the DMG, serving a page, before
+    anything is uploaded."""
+    import json
+    import plistlib
+
+    conf = json.loads((ROOT / "desktop" / "src-tauri" / "tauri.conf.json").read_text())
+    name = conf["bundle"]["macOS"]["entitlements"]
+    plist = plistlib.loads((ROOT / "desktop" / "src-tauri" / name).read_bytes())
+    assert plist["com.apple.security.cs.disable-library-validation"] is True
+    assert plist["com.apple.security.cs.allow-unsigned-executable-memory"] is True
+    workflow = (ROOT / ".github" / "workflows" / "release-desktop.yml").read_text()
+    gate = workflow.index("Verify the signed sidecar starts and serves")
+    assert gate < workflow.index("Notarize and staple the DMG")
+    step = workflow[gate : workflow.index("Notarize and staple the DMG")]
+    assert '"$server" --version' in step
+    assert "serve --library" in step and "curl -sf" in step
+    assert "alarm 120" in step and "hdiutil detach" in step